Hi Andrey,
On Wed, 10 May 2000 00:04:21 +0400GMT (10/05/2000, 04:04 +0800GMT),
Andrey G. Sergeev (AKA Andris) wrote:
TF>> FETCH - could not store message (file name - C:\WINDOWS\TEMP\BAT7382.TMP)
AGSAA> If you are using some antivirus software such as PC-Cillin in the
AGSAA> monitor mode The Bat! may not be able to store any message containing a
AGSAA> probably malicious code (in other words, write to or read from some
AGSAA> file) to your disks. If so, TB! informs you about I/O error by writing
AGSAA> the string quoted above to the log file. Of course the whole I/O
AGSAA> operation couldn't be completed.
I think that behaviour is very good.
AGSAA> I think that the offending file doesn't contain a probably
AGSAA> dangerous code at all - because PC-Cillin _prevented_ TB! to
AGSAA> write it into. Instead of that there may be some garbage in
AGSAA> this file - you can _safely_ *view* it in any program like
AGSAA> Notepad, FAR, Hiew etc.
The file DID contain TROJ-PRETTY-PARK. I deleted it already, so I
cannot view it any more.
AGSAA> My opinion as a system administator is: don't worry _too_ much about
AGSAA> this issue - unless you manually _execute_ this .tmp file you have no
AGSAA> ways to infect your system.
Thanks for your valued professional opinion. But as a layman, I keep
PC-Cillin in the monitor mode, and I keep recommending it to everybody
who doesn't have a firewall. Even if viruses don't execute unless you
actually invoke execution manually, I wouldn't be too happy having
them on my HD without me even knowing about it. ;-)
--
Cheers,
Thomas.
Message reply created with The Bat! 1.42c
under Chinese Windows 98 4.10 Build 1998
on a Pentium II/350 MHz.
--
--------------------------------------------------------------
View the TBUDL archive at http://tbudl.thebat.dutaint.com
To send a message to the list moderation team double click here:
<mailto:[EMAIL PROTECTED]>
To Unsubscribe from TBUDL, double click here and send the message:
<mailto:[EMAIL PROTECTED]>
--------------------------------------------------------------
You are subscribed as : [email protected]
